Privacy notice
Updated 2026-10-03 · Version carrierfront-privacy-2026-10-03-v1
Who we are and how to contact us
CarrierFront LLC provides managed business websites, domains, hosted email and creative services. Contact support@carrierfront.com or write to CarrierFront LLC, 3810 Ridgedale Dr, Cincinnati, OH 45247. This notice covers our application, service operations and support. A customer receiving an inquiry through its website is responsible for its own use of that information.
Information we collect
We process account names and email addresses; authentication and session records; company and public carrier-registration information; verification attempts and results; website drafts, supplied content, creative references, generated artwork and approvals; inquiry sender/contact and shipment details; support messages and delivery records; and order, subscription, agreement, domain and mailbox service records.
Hosting and authentication providers also process network, request, device and error information for operation and security. For domain orders, we retain the network IP observed by our hosting platform with agreement acceptance as registration evidence. This is not proof of personal identity. Payment-card information is entered through Stripe; CarrierFront stores payment references and status rather than full card numbers.
How we use information
We use information to operate and secure accounts, verify service requests, prepare and host approved websites, deliver inquiries, fulfill reviewed creative work, administer payments/domains/email, answer support requests, investigate errors or misuse, and meet accounting, dispute and registrar obligations.
Saving a draft, making a payment or approving artwork does not automatically publish a website. Approved website content becomes public when publication is authorized. Inquiry information is shared with the business receiving the inquiry; inquiries do not book freight.
Service providers and disclosures
Our service providers include Vercel for hosting and AI Gateway; Neon for the application database and authentication; Stripe for payments; Resend for support email and service notifications; Tucows/OpenSRS for domain registration and hosted email; and Porkbun for CarrierFront's own domain and mail infrastructure. OpenAI processes selected text and images used for AI-assisted features. Authorized operators access relevant records to provide and support the service.
Domain information may be disclosed to registries, ICANN, escrow services and other recipients required by the registrar agreement. We may also disclose information to comply with applicable legal requirements, protect accounts and systems, resolve disputes, or carry out a business transfer with appropriate protections. Providers process information under their own terms and may operate outside your country.
AI assistance and creative references
For routine support, bounded message text and subjects may be sent through Vercel AI Gateway to OpenAI to classify a request and select reviewed help content. Uncertain requests, requests for a person and follow-ups are directed to an operator. Automated support does not authorize account changes, payments, domain purchases or website publication.
Website rewrite tools process selected text to prepare suggestions. Creative features process submitted references, prompts and selected outputs to prepare and revise artwork. You must have permission to submit material; portrait references require the pictured adult's permission. Permission to process an image for fulfillment is separate from permission to publish it or use it in marketing.
CarrierFront does not currently enforce end-to-end zero retention across AI providers. Provider abuse-monitoring records, processing storage and exceptions follow the provider's applicable terms. We do not promise that every submitted input is immediately deleted or that every AI provider has zero retention. Do not include passwords, card details, domain transfer codes or unnecessary sensitive information in material submitted for AI assistance.
Cookies and communications
Necessary authentication, session and private-preview cookies support account access. Hosting and authentication providers process request and error information for operation, security and troubleshooting. The reviewed application does not include third-party advertising pixels or behavioral advertising trackers. Blocking necessary cookies may prevent account access.
Verification messages, billing and domain notices, inquiry notifications and support replies are service communications. Account support replies are available in the signed-in workspace; notifications may be sent to a verified account address. Check your account if an email notification does not arrive. Marketing permission is separate from service communications.
Retention and cleanup
We keep information needed to provide active services. Website inquiries become eligible for cleanup review 12 months after receipt; private website and creative content 90 days after confirmed service end; and resolved support content 24 months after resolution or the last related delivery update. These are review windows, not promises of automatic deletion on a particular day.
After confirmed mailbox suspension, mailbox data becomes subject to manual retention review after 30 days. Arrange export or migration before service ends. Deletion is not automatic on day 30 and storage is not indefinite. Billing, agreement-acceptance, domain, audit and security records may remain where needed for documented accounting, disputes, abuse prevention or registrar obligations.
Operators review outstanding issues, authorized export/deletion requests and required holds before cleanup. Provider-held copies, logs, mailbox recovery and backups have separate schedules and exceptions. Development or test copies containing affected information must be included in the review. Deleting application content does not immediately erase all provider copies; completed deletion instructions must be reapplied if affected records are restored.
Access, correction and deletion requests
Use signed-in support or contact support@carrierfront.com to ask about access, correction, export or deletion. We verify identity proportionately before disclosing information or making changes. An ordinary email alone does not authorize account deletion or a domain transfer. We assess applicable rights, deadlines and exceptions and explain information that must remain for an active service or required obligation.
Contact the receiving business about its use of your website inquiry. CarrierFront can help identify the relevant service record. Do not send sensitive identification documents unless we arrange a suitable verification method.
Security and audience
We use access controls, authentication and restricted service roles to limit access to private content. No service can guarantee absolute security. Keep account contact details current and protect credentials. Our business services and portrait features are intended for adults; do not submit children's portrait references.
Changes to this notice
We date and version material changes to this notice and publish the updated notice here. Where a change requires renewed consent or another notice, we obtain or provide it through the applicable service flow. Historical accepted order terms remain part of their original records.